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KEY INFORMATION ISSUING DEVICE, WIRELESS OPERATION DEVICE, 
AND PROGRAM 

BACKGROUND OF THE INVENTION 
5 The present invention relates to a key information 

processing technology. 

Key information has hitherto been utilized in a variety 
of scenes in the hximan society . For example , data communications 
requiring the confidentiality of information involve using 
10 encryption keys. Further, what key information is recorded on 
O magnetic stripes is used as a key for a building and an office 

N as a substitute for a metallic key matching with a configuration 

CH of a key hole. Pieces of information on encryption keys and 

keys for the buildings etc are generically termed key 
15 information . 

V The prior art system is, however, incapable of easily 

fy changing such a piece of key information and reissuing the key 

information. Alternatively, even if capable of reissuing the 
key information, a cipher is required to be stored, and hence 
20 the re-issuance needs a re-storing process, which is 

time-consioming . Therefore , though the encryption keys are used 
in the communications between information devices such as 
personal computer (which hereinafter be abbreviated to a PC) 
and so on, simple communications performed in daily life such 
25 as communications between a TV receiver and a wireless remote 
controller thereof and communications between a wireless 
keyboard and the personal computer, do not involve the use of 



- 2 - 



the encryption keys. 

Supposing that, for instance, home banking through the 
wireless remote controller and the wireless keyboard will be 
conducted from now on into the future, however, it is desirable 

5 that those communications be performed in an encryption-oriented 
system. It is because a password etc of a bank account might 
be intercepted (wiretapped) . 

It is required that a cipher be agreed upon between 
communication devices in order for communicating parties to 

10 decrypt such a cipher. Accordingly, there is needed a system 
capable of readily issuing the encryption key with security 
between the TV receiver and the wireless remote controller and 
between the PC and the wireless keyboard. 

On the other hand, magnetic stripe type and IC card type 

15 keys (which will hereinafter be called electronic keys) used 
for locking and unlocking, e.g., a building, an office and so 
on, are convenient to carry and therefore easy to be lost and 
to become a target for theft. These types of keys are managed 
by, e.g., a center of a key (or building) management company. 

20 Hence, if such a key is lost, all the keys distributed 

for using the building and offices must be collected, and the 
key information must be rewritten. The collection and 
re-issuance of the keys are very time-consuming. 

25 SUMMARY OF THE INVENTION 

It is a primary object of the present invention to provide 
a technology capable of easily issuing key information to a key 
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information retaining device that retains the key information. 

It is another object of the present invention to provide 
a technology capable of ensuring sufficient security for 
protecting the key information when issued from being 
5 intercepted. 

To accomplish the above objects, according to one 
aspect of the present invention, a key information issuing device 
(1, lA, IB) issuingkey information to a key information retaining 
device (2, 2A, 2B) , comprises an authentication module (14, 3) 
10 authenticating an issuer of the key information, an output module 

C3 

O (13) outputting the key information to the key information 

=f= 

retaining unit, and a recording module (11) recording a mapping 
Cn of the issued key information to the key information retaining 

s unit, wherein the key information is issued in response to an 

N= 15 indication of the authenticated issuer. 

> Preferably, the key information retaining device (2, 2A, 

fy 2B) maybe awirelessoperationdevice (2 , 2A) wirelessly connected 

to an information device and may include a key information input 
module (23) inputting the key information in contact with the 
20 key information issuing device, and the output module (13) may 
include a contact module outputting the key information in 
contact with the key information input module (23) . 

Preferably, the key information retaining device (2, 2A, 
2B) may be a wireless operation device (2, 2A) wirelessly 
25 connected to an information device and may include a medium input 
module inputting information from a recording medium, and the 
output module (13) may include a recording medium write module 
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writing the information to the recording medium, and may issue 
the key information through the recording medium. 

Preferably, the key information retaining device (2, 2A, 
2B) may be a wireless operation device (2, 2A) wirelessly 
5 connected to an information device and may include a near 
communication module incapable of performing communications 
beyond a predetermined distance, and the output module (13) may 
include a near communication module incapable of performing the 
communications with the key information retaining device beyond 

H 10 a predetermined distance, and may issue the key infoimation 

P through the near communication module. 

S| Preferably, the key information issuing device (1, lA) 

Cn may further comprise a receiving module (13) receiving wireless 

= signals from the key information retaining device , and a decoding 

£3 

15 module (11) decoding the information contained in the wireless 

I- 

_r signals and encrypted with the key information, 

m According to another aspect of the present invention, a 

wireless operation device (2, 2A) wirelessly connected to an 
information device, comprises a key information input module 
20 (23) inputting key information for encrypting the information, 
a recording module (24) recording the key information, an 
operation module (22) detecting an operation of a user, an 
encryption module (21) encrypting user's operation based input 
information with the key information, and a transmission module 
25 (25) transmitting the encrypted input information to the 
information device. 

Preferably, the key information input module (23) may 
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include a contact, module inputting the key information in a 
contact manner. 

Preferably, the key information input module (23) may 
include a medixam input module inputting information from a 
5 recording medium. 

Preferably, the key information input module (23) may 
include a near communication module incapable of performing 
communications beyond a predetermined distance. 

Preferably, the wireless operation device (2, 2A) may 
1^=^ 10 further comprise a setting module setting an execution or 
C3 non-execution of the encryption, wherein the encryption module 

'^4 may encrypt the input information when the execution of the 

in 

ff\ encryption is set. 

=' According to still another of the present invention, a 

U 15 wireless operation device (2, 2A) wirelessly connected to an 

> information device, comprises an operation module (22) detecting 

P 

?n a user's operation, a transmission module (25) transmitting 

user's operation based input information, and a confirmation 
module (21) confirming whether there is a response signal from 

20 the information device with respect to the transmitted input 
information, wherein the transmission of the input information 
is stopped if the response signal is not obtained. 

According to a further aspect of the present invention, 
a wireless operation device (2, 2A) wirelessly connected to an 

25 information device, comprises an operation module (22) 

generating input information by detecting a user's operation, 
a simulated information generating module (21) generating 
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simulated information simulating the input information, and a 
transmission module (25) transmitting the input information or 
the simulated information. 

Preferably, the simulated information may be transmitted 
irrespective of whether the user's operation is made or not 
(S2A-S2C) . 

Preferably, the key information retaining device (2, 2A, 
2B) may be an electronic key {2B)that unlocks a predetermined 
area. 

According to a still further aspect of the present 
invention, a key information managing method of managing key 
information issued to a key information retaining device, 
comprises authenticating an issuer of the key information 
(SlO-Sll) , generating key information (S15) , outputting the key 
information to the key information retaining unit (SI 6) , and 
recording a mapping of the issued key information to the key 
information retaining unit (SIB) . 

According to a yet further aspect of the present invention , 
there is provided a program executed by a computer to actualize 
any one of the functions described above. 

According to an additional aspect of the present invention , 
there is provided a readable-by-computer recording medium 
recorded with such a program. 

As described above, according to the present invention, 
it is possible to ensure the sufficient security for protecting 
the communication between the information device and the wireless 
remote control from being intercepted. According to the present 
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invention, the key information can be easily issued to the key 
information retaining device for retaining the key information . 
Further, according to the present invention the sufficient 
security against the interception can be ensured when issuing 
5 the key information. 
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BRIEF DESCRIPTION OF THE DRAWINGS 
FIG. 1 is a diagram showing an information system as a 
whole in a first embodiment of the present invention; 
10 FIG. 2 is a block diagram showing a remote controller 2; 

O FIG. 3 is a diagram showing a data structure of a packet; 

"J FIG. 4 is a flowchart showing steps of distributing an 

f fl 

Cm encryption key to the remote controller 2 from a main unit 1; 

s FIG. 5 is a flowchart showing a process when operating 

U 15 the remote controller; 

> FIG. 6 is a flowchart showing details of a process of 

fy. encrypting button information; 

FIG. 7 is a flowchart showing details of a process of sending 
a button information packet and a dummy packet; 
20 FIG. 8 is a flowchart showing a process when in a receiving 

operation of the main unit 1; 

FIG. 9 is a diagram showing a system architecture of an 
information system for executing home banking in a second 
embodiment of the present invention; and 
25 FIG. 10 is a diagram showing a system architecture of an 

information system for executing a security management of an 
office in a third embodiment of the present invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
Preferred embodiments of the present invention will 
hereinafter be described with reference to the accompanying 
5 drawings . 

«First Embodiment» 

A first embodiment of the present invention will 
hereinafter be described with reference to FIGS. 1 through 8. 
FIG. 1 is a diagram showing an information system as a whole 
1==^: 10 in the first embodiment. FIG. 2 is a block diagram showing a 
Q wireless remote controller 2. FIG. 3 is a diagram showing a 

data structure of a packet transmitted and received between a 
main unit 1 and the wireless remote controller 2. FIG. 4 is 
a flowchart showing steps of distributing an encryption key to 
the wireless remote controller 2 from the main unit 1. FIGS. 
5 through 7 are flowcharts each showing a process when operating 
the wireless remote controller 2. FIG. 8 is a flowchart showing 
a process when the main unit 1 receives the packet. 
<Outline of Functions> 

The information system in the first embodiment is operated 
through wireless communications by the remote controller . This 
information system authenticates a user and issues an encryption 
key for every remote controller operated by the user. At this 
time the information system records the encryption key issued 
for every remote controller. 

When the user operates the information system by the remote 
controller, input information is encrypted by the encryption 



key. Then, the remote controller transmits a 

start— of-communication request to the information system and 

transmits the encrypted input information. 

The information system identifies the remote controller 
in response to the start-of-communication request transmitted 
from the remote controller. Then, the information system 
collates the encryption key issued to the requester remote 
controller with the key among those recorded. Subsequently, 
the information system decodes the input information with this 
encryption key and detects an operation of the user. 

The encryption key is distributed in the following steps . 

(1) A device on the main unit of the information system 
executes authenticating the user identity. This process is to 
confirm whether the user is qualified for receiving a 
distribution of key information. 

(2) Next, the main unit confirms proximity of the remote 
controller to the device itself. 

(3) Subsequently, the main unit generates an encryption 
key (e.g., a random number) . 

(4) The main unit transmits the encryption key via a safety 
communication path that prevents an interception (wiretapping) . 

(5) The main unit confirms that the remote controller 
receives the encryption key in safety. 

<Whole Architecture> 

FIG. 1 is the diagram showing the whole architecture of 
the present information system. As shown in FIG. 1, this 
information system is configured by the main unit 1 and the 
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wireless remote controller 2. 

The main unit 1 is categorized as an information processing 
device capable of communicating with an outside system via an 
unillustrated network. The main unit 1 may be, for example, 
5 a personal computer (which will hereinafter be abbreviated to 
PC) , a digital TV, a set- top box and so on. 

The main unit 1 includes a PC-equivalent function module 
11, a remote controller proximity confirmation module 12, a 
remote controller communication module 13 and an authenticating 

10 function module 14. 

The PC-equivalent function module 11 includes a CPU for 
providing an information processing function, a memory for 
storing the information and a communication interface for 
accessing the network. The architecture and operation thereof 

15 are nowadays broadly known, and hence their explanations are 
herein omitted. The PC-equivalent function module 11, based 
on this architecture, controls the main unit 1 and provides a 
variety of information processing functions. 

For example, the PC-equivalent function module 11 

20 generates the encryption key to be transmitted to the wireless 
remote controller. The generation of the encryption key 
involves generating a random number (or prime number) by a 
predetermined algorithm. The generated encryption key is 
required when in the remote communications and is therefore 

25 recorded and stored in the unillustrated memory of the main unit 
1. 

The PC-equivalent function module 11 embeds an ID for 
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identifying the wireless remote controller into this key . Then , 
the PC-equivalent function module 11 records a mapping table 
containing the IDs of the wireless remote controllers 2 and the 
encryption keys distributed. 
5 The ID may involve the use of a production number (serial 

number) of the wireless remote controller 2. Further, the ID 
of the remote controller may also be generated by use a random 
number. With this ID, the present information system can 
administer a plurality of remote controllers. If one single 

y, 10 remote controller is to be used, the ID is not required. If 

P 

Q there are other necessary pieces of information, these pieces 

="E 

of information may be contained in a part of the encryption key. 

Further, the PC-equivalent function module 11 checks 
whether the wireless remote controller 2 surely receives the 
15 encryption key . In this case , the PC-equivalent function module 
11 can confirm it simply by , for instance, indicating the wireless 
remote controller 2 to transmit the encryption key back. 

lU 

Moreover, the wireless remote controller 2 may transmit only 
a checksum of the encryption key back to the module 11. Even 

20 if failing to transmit the encryption key, the wireless remote 
controller 2 just falls into an unusable state and becomes usable 
by retrying the distribution steps. Accordingly, if the 
reliability of the encryption key transmission process is 
sufficiently high, there may be omitted the confirmation of 

25 whether the wireless remote controller 2 surely receives the 
encryption key. 

The PC-equivalent function module 11 provides a function 
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of authenticating the user identity . The authentication method 
includes a biometrics authentication using a fingerprint, sound 
spectrogram etc, a code number authentication, a password 
authentication and so forth. A method corresponding to a 
5 confidentiality required and an actualizing cost can be selected 
from those methods . 

The authentication function module 14 checks based on the 
authentication method whether the user is qualified for 
indicating the distribution of the encryption key to the wireless 

10 remote controller 2 . If the user is unqualified for indicating 
the distribution of the encryption key, the main unit 1 stops 
the process just when the user proves unqualified. 

The remote controller proximity confirmation module 12 
is , for instance , a push button and so on . The user , when making 

15 the wireless remote controller 2 proximal to the main unit 1, 
manipulates this remote controller proximity confirmation 
module 12 (e.g. , presses the push button) . With this 
manipulation, the main unit 1 recognizes the proximity of the 
wireless remote controller 2. 

20 In this state , the main unit 1 performs wire coinmunications 

or wireless communications using feeble radio waves with the 
wireless remote controller 2. The main unit 1 and the wireless 
remote controller 2 in such a state are illustrated in a lower 
part in FIG. 1. 

25 The remote controller communication module 13 provides 

a function of transmitting the encryption key to the wireless 
remote controller 2. The remote controller communication 
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module 13 is configured of a communication interface and a 
communication program. Interfaces categorized as a serial 
system such as RS232C, a parallel system pursuant to the 
Centronics Standard and other wire systems are usable as the 
5 communication interface. 

Thus, the present information system involves the use of 
the hard-to-intercept wire system for transmitting the 
encryption key separately from the wireless communication 
interface. Note that wireless communication interface is, for 
10 example, an infrared- ray receiving module, a wireless LAN 
£3 interface and so on. The wireless communications may, however, 

Sj also be utilized for transmitting the encryption key by using 

m an electromagnetic shield in combination. 

Further, a close range wireless system incapable of 

O 

12 15 communications at a predetermined distance or farther may also 
'p be used. In this case, the remote controller communication 

;jrj module 13 may incorporate both of the encryption key transmitting 

function and a function of receiving an encrypted operation 
signal from the wireless remote controller 2. 
20 In this case, an interception countermeasure such as 

reducing a transmission output when in close proximity, may be 
taken together with the electromagnetic shield , Note that there 
is no limit to a data format for distributing the key information 
described above. 

25 FIG. 2 is the block diagram showing the wireless remote 

controller 2. The wireless remote controller 2 shown in FIG. 
2 includes a processing unit 21 for controlling the components 
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of the wireless remote controller 2, a keyboard 22 for detecting 
a user ' s operation on the information system and generating input 
information, an encryption key receiving module 23 for receiving 
the encryption key from the main unit 1 of the information system , 
5 a memory 24 to and from which the processing unit 21 writes and 
read the information, a transmitting/receiving module 25 for 
transmitting and receiving the information in the wireless 
communications in accordance with an indication given from the 
processing unit 21, a display unit 26 for displaying various 
10 items of information, an encryption ON/OFF switch 27 for 

5 

y specifying whether the encryption is executed or not, and a power 

H unit (battery) for supplying the electric power to the wireless 

Cm remote controller 2 . 

= The processing unit 21 is , for instance, a microprocessor . 

Q 

15 The processing unit 21 executes a control program loaded in the 

U 

memory 24 , thereby providing the function of the wireless remote 

5 

flj controller 2 . For example, the processing unit 21 receives the 

encryption key from the main unit 1 via the encryption key 
receiving module 23. Further, the processing unit 21 encrypts 
20 the information to be transmitted to the main unit by use of 
the encryption key received. 

The keyboard 22 contains, in addition to alphabetic and 
numeral keys, a variety of buttons, an ON/OFF switch and so on. 
The user inputs an indication to the information system by 
25 manipulating these keys, buttons and switch. 

The encryption key receiving module 23 is defined as a 
communication interface corresponding to the remote controller 
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communication module 13 of the main unit 1 described above. 

The memory 24 is constructed of a random access memory 
(RAM) and a read-only memory (ROM) . The memory 24 is stored 
with programs executed by the processing unit 21 and tables used 
5 by the processing unit 21. 

The transmitting/receiving module 25 is a communication 
interface for performing the wireless communications with the 
main unit 1. The transmitting/receiving module 25 is, e.g., 
an infrared-ray emitting module and an infrared-ray receiving 
10 module, and a wireless LAN interface. 

The display unit 26 displays an operation state of the 
wireless and so on. For example, the display unit 26 is a power 
lamp, etc. 

The encryption On/Off switch 27 specifies whether the 
15 information is encrypted in the processing unit 21. This 
encryption On/Off switch is, provided so that the present 
wireless remote controller 2 is used for the general purpose, 
for an example , in a case that the information needs to be encrypted 
in the communications with a TV receiver etc and an operation 
20 signal of an air-conditioner does not require the encryption 
(which means that a control unit of the air-conditioner is not 
adapted to the encryption) . The user does an on/off setting 
of the encryption in accordance with a target operated by the 
wireless remote controller 2 by use of the encryption On/Off 
25 switch 27. 

<Data Structure> 

FIG. 3 shows an example of the data structure of wireless 



communication data (which will hereinafter be referred to as 
a packet) transferred and received between the main unit 1 and 
the wireless remote controller 2. As shown in FIG. 3, according 
to the present information system, a start-of-communication 
packet, a communication permission packet, a button 
information/dummy packet and an acknowledgement packet are 
prepared as packets of this category. 

The start-of-communication packet is used for the wir eles s 
remote controller 2 to request the main unit 1 to start the 
communications. As shown in FIG . 3, the start-of-communication 
packet has fields stored with a header, a packet ID, a remote 
controller ID, a piece of dummy data and a checksum. 

The header is defined as a bit string that indicates the 
packet transferred and received between the main unit 1 and the 
wireless remote controller 2 in the present information system. 
Referring to FIG. 3, a bit string '"SSAA" (hexadecimal number) is 
exemplified as the header. 

The packet ID is an identification number specifying a 
category of the packet. Referring again to FIG. '3 , the ID ''OOOO" 
is specified in the start-of-communication packet. 

The dummy data in the start-of-communication packet is 
defined as a bit string embedded in an unused field of the 
start-of-communication packet. Further, the checksum is 
defined as a piece of information for confirming a validity of 
the data when receiving the packet. 

The communication permission packet is a packet used for 
the main unit 1 to notify the wireless remote controller 2 of 
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a communication permission in response to the 
start-of -communication packet sent from the wireless remote 
controller 2 . As shown in FIG. 3, the communication permission 
packet has fields stored with a header, a packet ID, a remote 
5 controller ID, a session ID, a piece of dummy data and a checksum. 
The header, the packet ID, the remote controller ID, the 
dummy data and the checksum among these pieces of data are the 
same as those in the start-of-communication packet. Further, 
the main unit 1 notifies the wireless remote controller 2 of 

10 the session ID each time the communication permission or receipt 
acknowledgement is made. The wireless remote controller 2 
encrypts the input information with the received key information 
and this session ID. 

The button information/dummy data packet is categorized 

15 into a button information packet and a dummy packet . The button 
information packet is used for the wireless remote controller 
2 to transmit the button information (input information of the 
button manipulated by the user) to the main unit 1. Further, 
the dummy packet is used for transmitting the dummy data. 

20 As shown in FIG. 3, the button information/dummy packet 

has fields stored with a header, a packet ID, a remote controller 
ID, encrypted button infoimation or dummy data and a checksum. 

The encrypted button information among these pieces of 
data is a piece of input information generated when the user 

25 operates the wireless remote controller 2 . The button 

information is previously encrypted with the encryption key and 
the session ID that have been transmitted from the main unit 
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1 to the wireless remote controller 2 . Moreover, the dummy packet 
is a packet for preventing a third party from intercepting 
(wiretapping) the button information packet. The dummy packet 
contains dxammy data simulating the button information. An 
5 unspecified number of dxaitvmy packets are transmitted before and 
after the button information packet. 

The acknowledgement packet is a packet used for the main 
unit 1 to notify the wireless remote controller 2 of an 
acknowledgement in response to the button information/dummy 
10 packet sent from the wireless remote controller 2 . As shown 

Q 

O in FIG. 3, the acknowledgement packet has fields stored with 

=F 

H a header, a packet ID, a remote controller ID a "checksum of 

in 

r-R the received packet", a next session ID, and a checksum. 

=F 

= The "checksum of the received packet" among those pieces 

C3 

1,^ 15 of data is a checksum of the packet received at the previous 
session. Further, the next session ID is used for encrypting 
?n the button information next time . 

<Operation> 

FIG . 4 is the flowchart showing an example of an encryption 
20 key distributing process. This process is a process of the 
program executed by the main unit 1 (the PC-equivalent function 
module 11) when the main unit 1 transmits the encryption key 
to the wireless remote controller 2 . 

In this process, the main unit 1 at first executes 
25 authenticating the user's identity (SIO) . The authentication 
of the user's identity involves reading the remote controller 
ID, reading the authentication information from the user and 
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confirming the authentication information. The 
authentication information given from the user includes a 
fingerprint, a sound spectrogram, a code number or a password. 
Next, the main unit 1 judges based on a result of this 
5 authentication whether the user is qualified for receiving the 
distribution of the encryption key (Sll) . This judgment is made 
based on a comparison between the given authentication 
information and the authentication information registered in 
the main unit 1. The main unit 1, when judging that the user 
10 is unqualified and is therefore unauthorized user, aborts the 
process . 

Whereas if judging that the user is qualified, the main 
unit 1 next waits for the wireless remote controller 1 to approach 
the main unit 1 itself (S12) . Then, the main unit 1 judges whether 
15 the wireless remote controller is in close proximity to the main 
unit 1 itself (S13) . 

Then, if the wireless remote controller 2 is not in close 
proximity, the main unit 1 judges whether it is a time-out or 
not (S14) . If not the time-out, the main unit 1 returns the 
20 control to S12. Whereas if it is the time-out, the main unit 
aborts the process. 

When judging in S13 that the wireless remote controller 
2 gets approached, the main unit 1 generates the encryption key 
(S15) . Next, the main unit 1 transmits the encryption key to 
25 the wireless remote controller 2 (S16) . 

Subsequently, the main unit 1 waits for a response from 
the wireless remote controller (S17) . If there is no response , 



the main unit 1 judges whether it is the time-out (S19) . Then, 
if not the time-out, the main unit 1 returns the control to S17. 
Whereas if it is the time-out, the main unit 1 aborts the process . 

When judging in S18 that there is the response, the main 
5 unit 1 judges whether this response is normal (SIA) . If not 
normal, the main unit 1 returns the control S12, and repeats 
the same process. 

When judging in SIA that the response is normal, the main 
unit 1 creates and updates a mapping table stored with the remote 

i''^ 10 controller ID and the encryption key (SIB) . Thereafter, the 

O 

O main unit 1 finishes the process. 

=p 

H FIG. 5 shows the flowchart shoring the operation of the 

Cn wireless remote controller . This process is a process of the 

= program executed by the processing unit 21 of the wireless remote 

C3 

U 15 controller 2. An execution of this process is triggered by 

=C power-on of the wireless remote controller 2 or by pressing an 



unillustrated reset button. 

In this process, to start with, the wireless remote 
controller 2 initializes the wireless remote controller 2 itself 
and comes to a status of waiting for the encryption key (S20) . 
Next, the wireless remote controller 2 judges whether the receipt 
of the encryption key is completed (821) . 

When the receipt of the encryption key is completed, the 
wireless remote controller 2 saves the received encryption key 
together with its own remote controller ID, and sends a 
completion-of-receipt response (S22) . Thereafter, the 
wireless remote controller 2 comes to a waiting status (S23) . 
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This waiting status continues till a new encryption key is 
transmitted or a user's button manipulation is detected. 

Namely, when the receipt of the encryption key is started, 
the wireless remote controller 2 returns the control to S21, 
5 and confirms the completion of the receipt- On the other hand, 
when detecting the user's button manipulation, the wireless 
remote controller 2 sends the start-of-communication packet 
(S24) . 

Then, the wireless remote controller 2 waits for the 
10 communicationpermission packet (S25) . Subsequently, if unable 
to receive the communication permission packet from the main 
unit 1 in wait for a predetermined time, the wireless remote 
controller 2 shifts to the waiting status (S23) . 

While on the other hand, when receiving the communication 
15 permission packet, the wireless remote controller 2 executes 
encrypting the button information (S27) . Namely, the wireless 
remote controller 2 encrypts the input information generated 
by the user's button manipulation. 

Next, the wireless remote controller 2 sends a dummy packet 
20 (S28) . The number of times with which the dummy packet is sent 
is unspecified (random) . 

Next, the wireless remote controller 2 sends a button 
information packet (S29) . Next, the wireless remote controller 
2 sends a dummy packet (S2A) . The number of times with which 
25 the dummy packet is sent is too unspecified (random) . 

Next, the wireless remote controller 2 judges whether the 
button is manipulated (S2B) . Further, if manipulated, the 



wireless remote controller 2 returns the control to S27. 

Whereas if notmanipulated, the wireless remote controller 
2 judges whether it is a time-out or not (S2C) . if not the time-out , 
the wireless remote controller 2 returns the control to S2A. 
With this process , the dummy packet is transmitted an unspecified 
number of times till it comes to the time-out even when the user 
does not operate the wireless remote controller 2 . Whereas if 
it is the time-out, the wireless remote controller 2 shifts to 
the waiting status (S23) . 

FIG. 6 shows a detailed process of encrypting the button 
information (S27inFIG. 5) . In this process , the wireless remote 
controller 2, to begin with, judges whether the encryption On/Off 
switch 27 is switched ON (S270) . 

If the encryption On/Off switch 27 is switched OFF, the 
wireless remote controller 2 finishes the button information 
encryption process. Whereas if the encryption On/Off switch 
27 is switched ON, the wireless remote controller 2 reads the 
key information (S271) . 

Next, the wireless remote controller 2 reads the session 
ID (S272) . This session ID is obtained from the communication 
permission packet or the acknowledgement packet (see FIG. 3) . 

Next, the wireless remote controller 2 encrypts the input 
information with the key information and the session ID (S273) . 
Thereafter, the wireless remote controller 2 finishes the button 
information encryption process . 

FIG. 7 shows details of the process of sending the button 
information packet and the dummy packet (S28, S29 or S2A) 
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In this process , the wireless remote controller 2 at first 
sends the packet (the button information packet or the dxammy 
packet) (S41) . 

Next, the wireless remote controller 2 waits for the 
5 acknowledgement packet (S42) . Then, the wireless remote 
controller 2 judges whether the acknowledgement packet is 
received (S43) . If the acknowledgement packet is received, the 
wireless remote controller 2 advances the control to the next 
process . 

i* 10 While on the other hand, when judging in S43 that the 

13 

O acknowledgement packet is not yet received, the wireless remote 

controller 2 judges whether it is a time-out (S44) . If not the 

in 

ff\ time-out, the wireless remote controller 2 returns the control 

T' toS42(S44). If not the time-out , the wireless remote controller 

l2 15 2 returns the control to S42. Whereas if judging in S44 that 
it is the time-out, the wireless remote controller 2 shifts to 
^f! the waiting status . 

FIG. 8 is the flowchart showing a receiving operation of 
the main unit 1. Upon a start of this process, the main unit 
20 1 comes to a status of waiting for receiving the 

start-of-communication packet (S30) . Then, the main unit 1 
judges whether the receipt of the start-of-communication packet 
is completed (S31) . 

Then, when the receipt of the start-of-communication 
25 packet is completed, the wireless remote controller 2 collates 
the received remote controller ID (simply written as ID in FIG. 
6) with the mapping table (created and updated in SIB in FIG. 
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4) (S32) . 

Next, the main unit 1 judges whether the received remote 
controller ID is valid (S33) . If judged to be invalid, the main 
unit 1 returns the control to S30. 
5 Whereas if valid, the main unit 1 sends the communication 

permission packet (S34) . Next, the main unit 1 comes to a status 
of waiting for the button information/ diommy packet. Then, the 
main unit 1 judges whether the receipt of the button 
inf ormation/dummy packet is completed (S3 6) . 
10 The main unit 1, when the receipt of the button 

O 

C3 information/dummy packet is completed, sends the 

""J acknowledgement packet and further executes a decoding process 

m (S37) . 

5 Subsequently, the main unit 1 judges whether the received 

15 packet is a dummy packet (S38) . If judged to be the dummy packet, 
[g^ the main unit 1 returns the control to S35. 

fn If iiot the dummy packet, the main unit 1 takes in the button 

information (S3 9) . Thereafter, the main unit 1 returns the 
control to 535. 

20 <Effects of Embodiment> 

As discussed above, according to the information system 
in the first embodiment, the button information generated when 
operating the wireless remote controller 2 with respect to the 
main unit 1 or the information system, is encrypted. It is 

25 therefore feasible to decrease the possibility in which the 
operation signal generated when the information system is 
operated through the wireless remote controller 2 might be 
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intercepted by the third party. 

Further, on such an occasion, according to the present 
information system, the main unit 1 distributes the encryption 
key to the wireless remote controller 2 in the wire communications 
in a way that brings the wireless remote controller 2 into contact 
with the main unit 1 or the wireless communications using the 
feeble radio waves with the wireless remote controller 2 disposed 
in close proximity to the main unit 1. Hence, it is possible 
to reduce such a risk that the encryption key itself might be 
intercepted (wiretapped) by the third party. 

Moreover, according to the information system in the first 
embodiment, the information communications are carried out in 
a predetermined shake-hand procedure, for instance, as by the 
start-of-communication packet and the response packet 
responding thereto . It is therefore possible to reduce the risk 
that the operation signal generated when operating the 
information system through the wireless remote controller might 
be intercepted by the third party. 

Further, according to the information system in the first 
embodiment, for example, the dummy packets are transmitted before 
and after transmitting the button information packet. Hence, 
it is feasible to decrease the risk that the operation signal 
generated when operating the information system through the 
wireless remote controller 2 might be intercepted by the third 
party. 

<Modified Example> 

According to the first embodiment discussed above, the 



main unit 1 and the wireless remote controller 2 communicate 
with each other by use of the packets as shown in FIG. 3. The 
embodiment of the present invention is not, however, limited 
to the architecture and steps described above. For example, 
the start-of-communication packet basically capable of 
transferring (containing) the remote control ID may suffice, 
and the header, the packet ID etc may be or may not be added 
as the necessity arises. 

Moreover, a data size of the packet may be a fixed length 
or a variable length. In the case of the fixed length, the length 
may be adjusted by using the dummy data shown in FIG. 3. 

In the embodiment discussed above, the key information 
is passed to the encryption key receivingmodule 23 of the wireless 
remote controller 2 in the communications from remote controller 
communication module 13 of the main unit 1 to the wireless remote 
controller 2. The embodiment of the present invention is not, 
however, limited to this architecture. The key information may 
be passed to the wireless remote controller 2 from the main unit 
1 through a readable-by-computer recording medium such as a flash 
memory card and so on. 

In this case, the writing portion (e.g. , a card slot) to 
the recording mediummay be provided in the main unit 1 . Further, 
the wireless remote controller 2 may be provided with a reading 
portion (e.g., the card slot) from the recording medium. 
Configurations of these accessing devices to the recordingmedixim 
are broadly known, and hence their explanations are herein 
omitted . 
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In the embodiment discussed above, the input information 
is encrypted with the encryption key and the session ID. The 
embodiment of the present invention is not, however, confined 
to this method. For instance, the input information may be 
encrypted with only the encryption key without using the session 
ID. 

Moreover, it is considered that all appliances in home 
are controlled by one single remote controller. In the case 
of utilizing the remote controller incorporating the encrypting 
function, On/Off states of the air-conditioners, the channels 
of the TV and operations of a personal computer are all encrypted . 

For an example, the On/Off signals of the air-conditioner 
among these operations do not need the encryption, and there 
might be a case where it is difficult to provide the 
air-conditioner with the encrypting/decrypting function. In 
such a case, the remote controller may make an option of the 
encryption or non-encryption according to the necessity and may 
thus perform the communications. In this case, the encryption 
On/Off switch 27 shown in FIG. 2 may be set OFF. 

Alternatively, the PC is entrusted with all the remote 
controller communications and my decode by totally using the 
encrypted communications. In this case, if there is not the 
PC, the appliance can not be controlled, and the remote controller 
is unusable. Accordingly, it follows that a range of utilizing 
such a system is limited. 

«Second Embodiment» 

A second embodiment of the present invention will 
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hereinafter be described referring to FIG . 9 . FIG , 9 is a diagram 
showing a system architecture of an information system for 
executing home banking in the second embodiment. 

The discussion in the first embodiment has been focused 
5 on the architecture and the operation of the information system 
including the wireless remote controller 2 having the encrypting 
function and the main unit 1 operated by the wireless remote 
controller 2 . The second embodiment will exemplify a case where 
this information system is applied to home banking. Other 

10 configurations and operations in the second embodiment are the 
same as those in the first embodiment. Such being the case, 
the same components are marked with the same numerals, and their 
repetitive explanations are omitted. Further, the reference 
to the drawings in FIGS . 1 through 8 will be made as the necessity 

15 may arise. 

This information system is configured by a PC lA 
implementing a remote controller function (which will 
hereinafter be abbreviated to the RC function) , a remote 
controller 2A provided with a keyboard for operating the PC lA, 

20 and a bank host computer connected to the PC lA via LAN (Local 
Area Network) /WAN (Wide Area Network) . 

The configuration and the operation of the PC lA with the 
RC function are the same as those of the main unit 1 in the first 
embodiment. Further, the configuration and the operation of 

25 the remote controller 2A with the keyboard are the same as those 
of the wireless remote controller 2 in the first embodiment. 

The user inputs a code number to the PC lA with the RC 
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function through the remote controller 2A with the keyboard in 
the home banking. The communication from the remote controller 
2A with the keyboard to the PC lA with the RC function is similarly 
encrypted as in the information system according to the first 
embodiment. This architecture is capable of reducing the 
possibility in which the code number etc is intercepted 
(wiretapped) by the third party when utilizing the home banking. 

Note that the security in the communication from the PC 
lA with the RC function via the LAN/WAN to the bank host computer 
has hitherto been ensured by the variety of methods. 

Accordingly, the PC lAwith the RC function and the remote 
controller 2A with the keyboard in the second embodiment cover 
an area that has hitherto been considered to be lowest in security 
in the home banking. 

<Modified Example> 

The second embodiment discussed above has exemplified the 
case where the keyboard-attached remote controller 2A 
incorporating the encrypting function is applied to the home 
banking . The embodiment of the present invention is not , however , 
limited to this applied example. Namely, the remote controller 
2A with the keyboard and the wireless remote controller with 
the encrypting function shown in the first embodiment, can be 
applied to various categories of information systems . 

For example, the system described above can be applied 
when connected to an Internet provider. This is because the 
a password when connected to the Internet provider can be used 
in the same way as a credit card. The system for the encryption 
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on the network and on the telephone line is getting sophisticated , 
and hence an area exhibiting the lowest confidentiality may be 
the remote controller as viewed from the whole system. 
Accordingly, the wireless remote controller 2 enhances such a 
5 lowest-security area, i.e. , enhances essentially the security 
of the system on the whole. 
«Third Embodiment» 

A third embodiment of the present invention will be 
explained with reference to FIG. 10. FIG. 10 is a diagram showing 
10 a system architecture of an information system for executing 

O 

■P a security management in an office according to the third 

=F 

^4 embodiment . 

m 

fR This system is configured by a key information management 

5 PC IB for issuing an electronic key 2B used for an office worker 

12 15 to enter the room, an authentication information input device 
^£ 3 for authenticating an issuer of the key information, a lock 

ffi management device at an entrance of the building, a lock 

management device at a door of the office, and a key information 
communication path that connects these lock management devices 
20 to the key information management PC IB. 

A configuration of the key information management PC IB 
is the same as that of the main unit 1 in the first embodiment. 
According to the third embodiment , the key inf ormationmanagement 
PC IB has a key information management table for managing the 
25 issued key information for every electronic key 2B of the key 
receiver. This key information management table is a mapping 
of IDs of the electronic keys 2B to the issued key information. 
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The authentication information input device 3 serves to 
authenticate whether the issuer issuing the key information is 
valid. This authentication information input device 3 is, for 
example, a fingerprint reader, a sound spectrogram analyzer, 
5 a keyboard for inputting a code number or a password, and so 
forth. 

The electronic key 2B includes a memory for recording the 
key information. The electronic key 2B, for instance, a card 
formed with magnetic stripes, an IC card, or a stick recorded 

10 with magnetism- or IC-based information. 

When the key information of the this electronic key 2B 
is inputted to the lock management device at the entrance of 
the building or at the door of the office, the key ID of the 
electronic key 2B and the key information are transmitted via 

15 the key information communication path to the key information 
management PC IB. Then, if the key information management table 
has already been stored with the mapping of the key ID to the 
key information, the key information management PC IB transmits 
an unlock command the lock management device, thereby unlocking 

20 the entrance or the door. 

This electronic key 2B is distributed to the worker who 
unlocks the entrance of the building or the door of the office . 
Then, if the number of such new workers increases, the issuer 
of which the authentication information is registered issues 

25 the key information. 

Namely, the issuer at first authenticates the issuer 
himself or herself by use of the authentication information input 
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device 3 , and next commands the key information management PC 
IB to issue the key information. The key information is thereby 
written to the new electronic key 2B. In this case, the ID of 
the electronic key 2B and the key information are entered in 
the key information management table. 

Note that if the electronic key 2B is lost, the worker 
concerned notifies the issuer that the key 2B is lost . The issuer 
deletes the key information of the electronic key 2b distributed 
to that worker from the key information management table. 
Further, the issuer input the key information a new electronic 
key 2B in the same procedures and transfers it to the worker 
concerned. 

Thus, according to the system in the third embodiment, 
the authenticated issuer can simply issue he electronic key 2B. 
Moreover, in case the electronic key 2B is lost, the lost 
electronic key 2B can be made ineffective without exerting any 
influence on other workers . 

«Readable-by-Computer Recording Medium» 
The program executed by the computer to actualize any one 
of the processes (functions) described above in the embodiments 
discussed above may be recorded on a readable-by-computer 
recording medium. Then, the computer reads and executes the 
program on this recording medium, thereby providing the function 
of the main unit 1 , the PC lA with the RC function, the encryption 
key issuing device IB, the wireless remote controller 2, or the 
remote controller 2A with the keyboard shown in the embodiment 
discussed above. 
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Herein, the readable-by-computer recording medium 
embraces recording mediums capable of storing information such 
as data, programs, etc. electrically, magnetically, optically 
and mechanically or by chemical action, which can be all read 
by the computer. What is demountable out of the computer among 
those recording mediums may be, e.g. , a floppy disk, a 
magneto-optic disk, a CD-ROM, a CD-R/W, a DVD, a DAT, an 8mm 
tape, a memory card, etc. . 

Further, a hard disk, a ROM (Read Only Memory) and so on 
are classified as fixed type recording mediums within the 
computer . 

«Data Communication Signal Embodied in Carrier Wave» 
Furthermore, the above program may be stored in the hard 
disk and the memory of the computer, and downloaded to other 
computers via communication media. In this case, the program 
is transmitted as data communication signals embodied in carrier 
waves via the communication media. Then, the computer 
downloaded with this program can be made to provide the function 
of the main unit 1 , the PC lA with the RC function, the encryption 
key issuing device IB, the wireless remote controller 2, or the 
remote controller 2A with the keyboard. 

Herein, the communication media may be any one of cable 
communication mediums suchasmetallic cables includinga coaxial 
cable and a twisted pair cable, optical communication cables, 
or wireless communication media such as satellite communications , 
ground wave wireless communications, etc. 

Further, the carrier waves are electromagnetic waves for 
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modulating the data communication signals, or the light. The 
carrier waves may, however, be DC signals. In this case, the 
data communication signal takes a base band waveform with no 
carrier wave. Accordingly, the data communication signal 
5 embodied in the carrier wave maybe any one of a modulated broadband 
signal and an unmodulated base band signal (corresponding to 
a case of setting a DC signal having a voltage of 0 as a carrier 
wave) . 
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